FR2628555A1 - PORTABLE ELECTRONIC DEVICE - Google Patents

Abstract

The invention relates to a microprocessor card. A non-volatile memory 12 incorporated in a smart card has an area definition information area 22 for recording area definition information 221, 222, ... corresponding to data write areas of User 231, 232, .... Each area definition information contains identifying information that indicates whether a corresponding user data write area is an area in which recorded data can be changed under the effect of an order coming from a keypad incorporated on the card. The change of data by means of the keyboard is thus authorized selectively according to the nature of the data concerned. Credit card applications.

Description

i

  The present invention relates to an electronic device

  portable, which is called an integrated circuit (IC) card, comprising a keyboard and a display unit on its

  surface, and in which are incorporated a non-volatile memory

  the erasable and a control element such as a unit.

the (UC).

  Recently, an advanced portable data recording medium has been developed in the form of a multifunctional IC card having a keyboard and a display unit.

  visualization formed on its surface, and in which are incor-

  porés an erasable non-volatile memory such as an EEPROM memory, and a control element such as a central unit (CPU). Such an IC card can be used to fill

  functions of a portable calculator, a horoscope

  to indicate the time, or what is called a notebook

  electronic pocket note, in which one can write di-

  information using the keyboard or the video unit.

  sualisation that are formed on the surface of the card. The breed

  European Union No 0617044 (published on 1 August 1986) describes a car-

  to CI comprising a keyboard and a display unit.

  According to a variant, it is possible to introduce such an IC card into an external device, such as a terminal, to exchange data with it, and the information which is introduced from such a device and which is written in the non-volatile memory can be replaced by other information,

  according to an order introduced by the keys of the keyboard.

  However, if the information which is introduced from the external device and is written in the memory, is for example a record of a commercial transaction linked to a central system, this data change function under the effect of given order 'by the keyboard, can lead to

  a serious problem modifying the recording.

  Specifically, specific information-such as a commercial transaction record-may be

  changed by mistake or intentionally. -

  An object of the invention is to provide a portable electronic device in which specific information can not be changed by mistake or intentionally, at

  means of an order given by a keyboard.

  To achieve the purpose indicated above, the invention provides a portable electronic device comprising key input means for the input of data and orders for the operation of the device, the first

  storage means, divided into a set of storage areas

  data for the recording of data, se-

  average means of memory for the recording of information

  identification data, indicating whether the data recorded in each data recording area of the first memory means can be changed by the

  key input means, and control means for

  commanding the first memory means, the control means comprising change means for changing the data recorded in the first memory means, under the control of an order representing a data change and which is provided by the means of key input, only in the case where the change identification information which is recorded in the second memory means indicates

  that the data can be changed.

  Other features and advantages of the invention

  will be better understood by reading the detailed description

  one embodiment, and with reference to the accompanying drawings in which: FIG. 1 is a plan view showing a structure of an IC card which shows an embodiment of a portable electronic device according to the invention; Fig. 2 is a block diagram which schematically shows the structure of an electrical circuit for the IC card of Fig. 1;

  FIG. 3 is a schematic representation of

  trant the configuration of a non-volatile memory of Figure 1; Fig. 4 is a schematic representation showing the configuration of the non-volatile memory of the IC card after it has been transmitted; FIG. 5 is a schematic representation showing

  a configuration record of identifying information

  tion; FIG. 6 is a schematic representation showing a memory configuration of the non-volatile memory before

the issuance of the card; and -

  Figures 7A and 7B are flow diagrams for

  the explanation of the operation of the device of the invention.

  FIG. 1 shows the external appearance of a portable electronic device in the form of a multi-function IC card, which is used, for example, as a card

  corresponding to an embodiment of the invention.

  tion. In FIG. 1, a card main body 1 comprises a thin and rectangular plastic plate in which an integrated circuit (IC) 2 is incorporated. A contact region 3, electrically connected to the IC 2, for establishing an electrical communication with a terminal (external device)

  (not shown) in a connected mode operation, is

  on the surface of the main body 1, and is placed in

  a position conforming to the standard of. the map. A de-vi-zone

  4, for viewing input / output data, time information, etc., and

  keyboard 5 are also formed on the surface of the main body

  1. Keyboard 5 includes layers of "Mi" through "M4" modes, ten numeric keys ranging from "0" to "9", keys

  calculation "+" "-" "x", and "/", etc. A battery 6 for the food

  electrical therapy is also incorporated into the body

principal 1.

  The electrical circuit of the IC 2 has the configuration shown in FIG. 2. More precisely, the IC 2 comprises a control element (for example a CPU) 11 which acts as a control section, a non-volatile memory

  erasable 12 and a program memory 13. The IC 2 is

  The nonvolatile memory 12, in which arbitrary data can be written arbitrarily, is formed for example by an EEPROM memory. As we

  FIG. 3 shows that the memory 12 includes a zone of information

  The program memory is constituted for example by a read-only memory whose content is defined.

  by masking, and control programs concerning the

  11 or others are written in this memory.

  As shown in Figure 4, a set of informa-

  Zone definition fields 221, 222, ... for defining the user area 23 and dividing it into a set of user data writing areas 231, 232, ..., are written in the zone definition information area 22 of the nonvolatile memory 12. The user area 23 in which various data (specific information such as a commercial transaction record) is written according to an application, is defined and divided in a set of user data writing areas 231, 232, ... by the area defining information 221, 222, 25 .... The zones 231, 232, ... can be accessed by actuating the

  mode keys "Mi" to "M4", in combination with the ten keys

  "0" to "9" on the keyboard S. As shown in Figure 4, the information 221, 222, ... which define the areas 231, 232, ... are written in the area 22 in correspondence with the fields 231, 232, Each information 221, 222, ... contains zone type information, such as access conditions, information

  size, departure address information, etc., relates to

  bringing to the corresponding one of the zones 231, 232, ....

  Identification information (ID) is written for

  one of the zone type information. Identity information

  indicates whether written (recorded) data in

  the corresponding one of the zones 231, 232, ... can be changed

  (written), and if the data can be read. By way of example, the identification information comprises four bits, as shown in FIG. 5. Thus, bit "3" indicates whether data can be changed from an external device (reader / writer: L / E), via the contact region 3, and the bit "2" indicates whether data can be

  to be read by an external device (reader / recorder: L / E).

  The bit "1" indicates whether data can be changed by the keyboard (CL) 5, and the bit "0" O indicates whether data can be read by the keyboard 5. Each bit represents the condition "NO" when a " 0 "is written, and it represents the condition

"YES" when a "1" is written.

  By way of example, the identification information "0011" indicates that data can not be changed or read by an external device, but can be changed or read by the keyboard 5. In this case, the corresponding one user data writing areas 231, 232, ... are used, for example, as a data writing part for a pocket electronic notebook. In other words, addresses, names, telephone numbers, etc. can be written or changed arbitrarily by means of the keyboard 5, or the written information can be viewed arbitrarily.

in the viewing part 4.

  Identification information "1101" indicates that data can be changed or read by an external device, but can only be read by the keyboard 5. In this case,

  the corresponding one of the zones 231, 232 is used, for example,

  as a writing area for a recording

  commercial transaction or other. An example of such

  transaction records consists of a record of

  reservation that is obtained when using the

  IC card in a plane seat reservation system.

  Thus, when an aircraft seat is reserved by telephone, a reservation record including a flight number, a reserved seat number, etc., for the aircraft, is written in a data writing area of corresponding user in zone 23, using a telephone line

  from an external device such as a reader / recorder $ -

  Treur. A user can therefore control the reservation record on the viewing part 5. Moreover, in an airport, an external device such as a reader / recorder can read the reservation data in the data writing area of corresponding user in field 23, and

  these data can be used in an embarking

  only for the plane. In this case, because it is not

  possible to change the data from the keyboard 5, the recording

  reservation record is not changed by mistake or

  tentionnellement. Each of the area definition information 221, 222,

  . containing the above identification information is written arbitrarily in accordance with an application of..DTD: a corresponding one of the data writing areas of use.

  231, 232, ... of the user area 23, at the time of issuance of the IC card. In this case, the information 221, 222, ... are written in the zone 22 by a system that

  can be easily controlled by a car emission machine.

  tes (not shown) to perform a writing function.

  Moreover, as shown in FIG. 6, each piece of information 221, 222, ... does not contain a starting address (starting position information) of a corresponding one of the zones 231, 232, ... to be defined. Zone definition information not containing a start address (hereinafter referred to as write area definition information) 221 ', 222', is written in the same positions as the information.

  defining zone 221, 222, ... to be really used.

  when the card is actually used. In order to

  create and add to the information 221 ', 222', ... a

  training which is not present in the latter,

  formations 221, 222, .. are larger than the information 221 ', 222', ..., with a difference corresponding to the additional information which is introduced when the card is actually used. Since information 221, 222, ... having a large volume is written when the card is actually used, portions without data are formed (empty data corresponding to two

  multiplets, as indicated by hatched sections on the

  Figure 6). These parts are kept unchanged until information 221, 222, ... is recorded, as

will describe it later.

  Looking at Figure 6, we note that two informa-

  writing area definition, 221 'and 222', are

  written. To write the information 221 'and 222', we introduce

  the main body 1 of the IC card into a card insertion part of a card-issuing machine (not shown), and input from a keyboard or other

  of the card-issuing machine, a defini-

  tion (zone type information, such as conditions of

  including identification information and information

  zone size). In other words; the-machine issued

  card issuance transmits to the control element 11 of the card

  to CI the input-definition information. The element of com-

  he receives the information and writes it to the

  zone definition training 22 of memory 12. In

  information 221 'and 222' written in the manner described

  above, the size information (xx, yy) represents

  what a user can actually use. Since a user data writing area of the user area 23 is not yet allocated, neither the information

  221 'or the information 222' does not contain any address information

starting.

  When the control element 11-receives a transmission command to record the definition information of

  221 and 222 which come from the car emission machine.

  te, after writing "writing area definition information 221 'and 222', it rearranges the information 221 'and

  222 'which have been written in the definitional information area

  22 to give them a format for easy manipulation, as shown in FIG.

  for example, each of the information of size.xx 'and yy', obtains

  naked by the addition of control data used at the time of ordering data, up to a size that a user can actually use, are actually used in

  as size information in data writing areas.

  corresponding respective user states, 231 and 232).

  The control element 11 then allocates zones 231 and 232 in the user zone 23, on the basis of the information of

  size above. After the control element 11 has corrected

  allocated zones 231 and 232, it calculates starting addresses (aaaa, bbbb) of zones 231 and 232 to be defined. The control element 11 then adds the calculated start addresses to the write area definition information 221 'and 222'

  in zone 22, which has the effect of recording information

  Zone definition mations 221 and 222 having an expected format

  for use when the card is actually used.

  The information 221 and 222 that will actually be used when the card is actually used are rewritten

  (by deleting the previous information) in the same po-

  only information 221 'and 222'. This completes the definition of the zones, that is to say the issuance of the IC card. The operation of the device having the above structure will be described below, with reference to the flow diagrams

  Figures 7A and 7B. For example, if an order for viewing

  Specific data that has been written to a certain user data writing area, for example the user data writing area 231, is introduced.

  by pressing the keys "Ml" to "M4", in combination with

  naison with the ten keys "0" to "9" on the keyboard 5 of the body

  1 (step S1), the command element reads the information

  identification in the area definition information

  221 corresponding to area 231, from the area of .informa-

  zone definition 22 (step S2). The control element 11 then determines whether a "1" is written in the "0" bit which is contained in the read identification information, and which indicates whether the designated data can be read by means of the keyboard. 5, to thereby determine whether the data can be read (step S3). If a "0" is written in the bit, the control element 11 determines that the data can not be read, and thus prevents the reading of the data in the area 231 and terminates the processing. If a "1" is written in the bit, the control element 11 determines that the specific data

  who are designated can be read, and so he reads the

  born from zone 231 (step S4). The read data is displayed on the display part 4 (step S5). In

  -the case where the determination made indicates that the

  should not be read, the control element 11 can

  visualize this result of determination on the part of vi-

  sualisation 4, in addition to the operation of preventing the

  reading data in area 231.

  If an order for the change of data written in the user data writing area 231, is introduced

  by pressing the "Mi" to "M4r" mode keys, -in combination

  With the ten keys "0" to "9" on the keypad 5 of the main body 1 (step S6), the control element -l reads the identification information in the field-definition information 221, corresponding to the zone 231, from the zone definition information zone 22 (step S7). The control element-ll then determines whether a "1" is written in the "1" bit which is contained in the read identification information, this condition indicating that the data may be

  be changed by the keyboard 5, thanks to which the com--

  mande-determines whether the data can be changed (step S8). If a "0" is written in the bit, the control element 11 determines that the data can not be changed, and therefore, it prohibits the data change in the zone 231 and terminates the processing. If a "1" 11 is written in the bit, the control element 11 determines that the data can be changed, and thus executes the change processing

  in area 231 (step S9) - In the case where the

  This determination indicates that the data must not be changed, the control element 11 can display this determination result on the viewing part 4, in addition to the operation of preventing the change.

data in field 231.

  If an order for reading the data written in the user data writing area 231 is inputted from an up-terminal reader / writer, constituting

  an external device, via the region of con-

  3 (step S10), the control element 11 reads the identification information in the zone definition information 221 corresponding to the zone 231, from the zone definition information zone 22 (step SII). The control element

  11 then determines whether a "1" is written in bit "2" con-

  stored in the read identification information, which condition indicates that the data can be read by an external apparatus, whereby the control element determines whether the data can be read (step S12). If a "0" is written in the bit, the control element 11 determines that the data can not be read, and therefore. he avoids

  reading the data in area 231 and terminates the processing

  ment. If a "1" is written in the bit, the control element 11 determines that the data can be read, and thus reads the designated data in the area 231 (step S13). The data,

  read is output to the reader / writer via

  diary of the contact region 3 (step S14). When the deter-

  If the data is not read, the control element 11 can issue this result.

  to the reader / writer via

  contact region 3, in addition to the operation con-

  to prevent the reading of data in field 231.

  If an order for the change of data written in the user data writing area 231 is inputted from the reader / recorder, via the contact region 3 (step S15), the control element 11 reads the identification information in the area definition information 221 corresponding to the area 231, from the area definition information area 22 (step S16). The control element 11 then determines whether a "1" is written in the "3" bit contained in the identification information being read, this condition indicating that the data can be changed, thereby allowing the element controlling whether the data can be changed (step S17). If a "0" is written in the bit, the control element 11l determines that the data can not be changed, and therefore, it prevents the data from changing in the area 231 and it

  terminate the treatment. If a "1" is written in the bit, the

  11 determines that the data can be changed and thus executes the change processing of the data.

  data in the designated area 231 (step S18). When the

  This determination indicates that the data must not be changed, the control element 11 can issue this determination result to the reader / recorder, for example.

  intermediary of the contact region 3, in addition to the opera-

  preventing the execution of the treatment of chan-

in Area 231.

  As described above, to change the contents of the non-volatile memory 12 by means of the keyboard 5, the element of

  command 11 determines, in accordance with the identification information

  If the data to be exchanged can be changed by the keyboard 5. In this way, the data are changed only when the control element determines that they can be changed. Therefore, important specific information such as a payment record or a registration

  booking of an airplane seat, which is written in the

  12 by an external device, can not be modified by the keyboard 5. As a result, the data security 9 is considerably improved in comparison with that of a

classic device.

  Thus, according to the invention, information

  specificity which is stored in a memory of a

  portable electronic tif can not be changed by mistake

  or intentionally by means of a keyboard of the device.

  The invention is not limited to the embodiment

  above, but may be subject to various modifications.

  For example, in the embodiment above, the information

  identification consists of 4-bit data. This

  However, training may include a 1-bit flag that indicates only if data can be changed by the

keyboard 5.

  It goes without saying that many other modifications can be made to the device and the method described and

  represented, without departing from the scope of the invention.

Z628555

Claims (13)

  A portable electromic device comprising: key input means (5) comprising a set of keys for inputting data and various commands; nonvolatile memory means (12) for the data recording, said nonvolatile memory means (12) being divided into a set of data recording areas (231, 232, ...),   each of which is intended to record correct data.   responding to a desired object or function; and. control means (11) for reading / writing data relating to   the nonvolatile memory means (12) in accordance with a   dre from the key input means (5), characterized in that: the nonvolatile memory means (12) comprise   furthermore an identification information recording area.   tion (22) for the recording of identifica-   tion (221, 222, ...) corresponding to the data recording areas (231, 232, ...), each identification information (221, 222, ...) containing information indicating whether the a corresponding one of the data recording areas (231, 232,   20 ...) is an area in which the recorded data can be   may be changed according to an order from the means   key input (5); when an order for a change of   in a designated data recording area which is one of the data recording areas (231, 232, ...), and a zone designated by the key input means (5) is applied. from the key input means (5), the control means (11) identify, in accordance with the identification information stored in the identification information recording area (22), in the means of nonvolatile memory (12) and corresponding. the designated data-recording area, if the designated data-recording area is an area in which the recorded data   can be changed; when the registration area of the   designated area is identified as an area in which the recorded data can be changed, the means of   command (11) perform a data change processing.   recorded data, in correspondence with data entered   picking up from the key input means (5) in relation to the designated data recording area; and when the designated data recording area is identified as an area in which the recorded data does not   can not be changed, the control means (11) prevents   the completion of the change processing of the data.   registered in relation to the registration area designated data.   2. Portable electronic device according to the   cation 1, characterized in that it further comprises data receiving means (3) for receiving data from an external apparatus, and in that the data which is recorded in the data recording area designated, and which are designated as to be changed by the key input means (5), are received by the data receiving means (3), from the external apparatus, and are recorded in the registration of   data designated nonvolatile memory means (12).   3. Portable electronic device according to claim   cation 1, characterized in that when the nonvolatile memory means (12) are to be divided to give all of the data recording areas (231, 232, ...), the   control means (11) arbitrarily write each informa-   identification (221, 222, ...) in the registration area.   identification information record (22) corresponding to an object of a corresponding one of the registration areas of data.   4. Portable electronic device according to the   cation 1, characterized in that each identifying information   cation (221, 222, ...) is represented by 1-bit data.   5. Portable electronic device according to claim   cation 1, characterized in that it further comprises display means (4) for displaying data which is recorded in the nonvolatile memory means (12); and in that each identification information (221, 222, ...) further contains information which indicates whether the corresponding one of the data recording areas (231, 232, ...) is an area from which the data   recorded may be read in accordance with an order   key input means (5); when an order requests   the display on the display means (4) of the data recorded in the designated data recording area is provided by the key input means (5),   the control means (1I) determine, in accordance with the   identification formation which is stored in the identification information recording area (22) in the nonvolatile memory means (12) and which corresponds to the   designated data-recording area, if the area of registration   designated data record is a zone from the-   the data which is recorded can be read, in the case where the designated data recording area is identified as an area from which the recorded data can be read, the control means (11) reads the data. designated by the key input means (5) from the designated data storage area, and display on the display means (4) the data which is read in the recording area of the designated data; and when the designated data recording area is identified as an area from which the data can not be read, the control means (11) prevents reading of the data from   the designated data recording area.   6. Portable electronic device according to the   cation 5, characterized in that each piece of information   (221, 222, ....) consists of 2-bit data, in   which a bit indicates if the recorded data can be changed, and a bit indicates whether the recorded data can be read.   7. Portable electronic device according to claim   cation 5, characterized in that it further comprises means   input / output data (3), intended to receive data   various commands from an external device, and to transmit data to this external device; and in that each identification information (22i, 222, ...) further comprises information indicating whether the corresponding one of the data recording areas (231, 232, ...) is an area in which saved data can be changed   according to an order from the external device; lors-   that the data input / output means (3) receive at least one   firing from the external apparatus a command to change the data recorded in a second designated data recording area which is one of the data recording area (231, 232, ...) and a zone designated by the order from the external apparatus, the control means (11) determines,   according to the identification information that is recorded   in the identification information recording area.   tion (22) in the non-volatile memory means (12), and   corresponds to the second data recording area desi-   If the second designated data recording area is an area in which the recorded data can be changed in accordance with an order from the external apparatus; when the second designated data recording area is identified as an area in which the   recorded data can be changed, the means of   mande (11) perform a data change processing   recorded, corresponding to the order that comes from the   external link, in relation to the second registration area   designated data element; and when the second zone of registration   designated data record is identified as an area in which the recorded data can not be changed, the control means (11) prohibit the change processing of the recorded data, in relation to   with the second designated data recording area.   8. Portable electronic device according to claim 1   7, characterized in that each identifying information   tion (221, 222, ...) consists of 3-bit data in which   the one bit indicates whether recorded data can be changed according to an order from the input means   key (5), a bit indicates whether recorded data can be   be read in accordance with an order from the means   key input (5), and a bit indicates whether data is   may be changed in accordance with an order from the external device.   9. Portable electronic device according to the claim   7, characterized in that each identifying information   tion (221, 222, ...) also includes information that   whether the corresponding one of the data recording areas (231, 232, ...) is an area from which recorded data can be read in accordance with an order from the external apparatus; when the means of entry /   data output (3) receive from the external device.   a reading order of the data recorded in the second   designated data-recording area, the means of communication   (11) determine, in accordance with the information of ideniti-   which is stored in the identification information registration area (22) in memory   nonvolatile (12), which corresponds to the second zone of   designated data record, if the second zone-of record-   designated data is an area from which recorded data can be read by an order from the external device; when the designated second data recording area is identified as an area from which recorded data can be read, the control means (11) reads from the designated second data storage area the data which is designated by the command from the external apparatus and instructing the data input / output means (3) to transmit to the external apparatus the data which is read in the designated second data storage area; and when the second designated data recording area is identified as being an area from which recorded data can not be read, the control means (11) prohibits the reading of the data in the se-   conde designated data storage area.   10. Portable electronic device according to the   cation 9, characterized in that each identifying information   cation (221, 222, ...) consists of 4-bit data in   which one bit indicates whether recorded data can be changed according to an order from the means   key input (5), a bit indicates whether data   may be read in accordance with an order from   key input means (5), a bit indicates whether data   may be changed in accordance with an order   dre from the external device, and a bit indicates whether recorded data can be read according to an order from the external device.   A portable electronic device, comprising: key input means (5) for inputting data and commands for operating the device; first   memory means (12), divided into a set of   data record (231, 232, ...), for recording the data, and control means (11) for controlling the data   first memory means (12), characterized in that   furthermore: second memory means (22) for recording change identification information which   indicates whether the data recorded in each zone of   data record of the first memory means (12) can   can be changed by the key input means (5); and in that the control means (11) comprise means   of change destined to change, under the control of a   Since it represents a data change, which is provided by the key input means (5), the data recorded will in the first memory means (12), only when the change identification information which is recorded in the second memory means (22) indicates   that the data can be changed.   12. Portable electronic device according to the   cation 11, characterized in that it further comprises: display means (4) for displaying data which is stored in the first memory means (12); and third memory means (22) for storing read identification information which indicates whether the   data recorded in each data recording area.   from the first memory means (12) can be visualized   by the display means (4); and in that the control means (11) further comprises means for   reading which, under the control of an order indicating the   of the data input, and which is provided by the key input means (5), apply to the display means (4) the data recorded in the first memory means (12), only when the identification information of reading which is recorded in the third memory means (22)   indicates that the data can be viewed.   13. Portable electronic device according to claim   cation 11, characterized in that it further comprises: data input means (3) for receiving data and commands for operating the device from an external device; and fourth memory means (22) for storing a write identification information which indicates whether the data received by the data input means (3) can be recorded in the first memory means (12); and in that the control means (11) further comprises recording means which, under the effect of an order representing the recording of data, and from the external apparatus, record in the first memory means (12) the data received from   data input means (3) only when the   write identification training which is stored in the fourth memory means (22) indicates that the data can be saved.